一种基于PERMIS PMI的安全访问控制的设计  

Design of a Secure Access Control based on PERMIS PMI

作　　者：汪晓睿[1] 

机构地区：[1]海军计算技术研究所,北京100841

出　　处：《计算机安全》2010年第9期10-12,共3页Network & Computer Security

摘　　要：为实现某型装备远程维修技术支援系统中资源的访问控制,保证系统数据安全,设计了基于PERMISPMI的安全访问控制方法,通过对业务层的合理构建和对主体、客体以及相应动作的访问控制策略配置,实现了由角色代替用户对资源进行访问。实践证明,基于PERMIS PMI的访问控制方法在系统中起到了良好的作用并降低了维护工作的强度。To achieve access control in a remote technical support system for equipment and ensure the security of the data,this paper designs a secure access control method based on PERMIS PMI.The roles instead of the users access to resources is implemented by the reasonable design for the business layer and the access control policy configuration to the objects,subjects and their corresponding actions.It has been found that access control method based on PERMIS PMI in the system plays a positive role and reduces the intensity for maintenance.

关 键 词：数据安全 访问控制 PERMIS PMI 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]